Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
File: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer (raw, json)
Hash identifier: 7stvoqhE/uzHAPSkIfmxLh2SOLYalHFdn6bgdyWOfJs=
Subject key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02C874
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 29 Jul 2026 13:43:08 +0000
Certificate not after: Thu 30 Sep 2027 00:00:00 +0000
Subordinate resources: AS: 18020
AS: 38544
AS: 45251
AS: 45454
AS: 55449
AS: 55803
IP: 49.156.24.0/21
IP: 101.0.64.0/18
IP: 103.14.64.0/22
IP: 103.18.196.0/22
IP: 103.208.216.0/22
IP: 103.237.108.0/22
IP: 103.250.20.0/22
IP: 110.173.128.0/19
IP: 111.67.0.0/19
IP: 111.118.160.0/20
IP: 116.90.0.0/18
IP: 125.214.64.0/20
IP: 137.59.248.0/22
IP: 150.129.12.0/22
IP: 163.53.248.0/22
IP: 175.41.40.0/22
IP: 182.160.128.0/18
IP: 202.4.224.0/20
IP: 202.45.150.0/23
IP: 202.130.44.0/22
IP: 203.16.60.0/23
IP: 203.19.59.0/24
IP: 203.98.69.0 -- 203.98.71.255
IP: 203.98.73.0/24
IP: 203.98.75.0/24
IP: 203.98.79.0 -- 203.98.80.255
IP: 203.98.83.0 -- 203.98.86.255
IP: 203.98.88.0/24
IP: 203.98.91.0 -- 203.98.93.255
IP: 203.98.95.0/24
IP: 203.123.59.0/24
IP: 223.27.0.0/19
IP: 2400:a600::/32
IP: 2401:fc00::/32
IP: 2401:fe00::/32
IP: 2402:9400::/32
IP: 2407:7800::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 13:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182388 (0x2c874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jul 29 13:43:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2b:68:fc:81:20:c7:84:ac:89:b6:1a:0d:56:
9c:64:82:5d:03:eb:65:a2:1f:24:12:9e:a5:f5:3b:
a5:fa:cd:cb:9b:cb:2a:37:11:b7:70:fd:2f:43:3a:
e8:50:4c:06:d9:13:cc:61:2e:1b:d9:70:ce:96:df:
5c:cb:25:0a:4f:10:77:2c:68:5c:ab:2d:22:24:5d:
08:da:06:82:58:86:b6:6b:a4:32:ae:9b:eb:88:24:
47:ff:6c:14:8b:87:0e:56:0e:68:a1:77:55:35:7d:
0c:18:00:00:ac:5f:8c:a7:ed:1a:80:fb:02:1c:cf:
46:6a:ff:06:13:0f:93:cd:6e:4a:6e:d7:36:76:50:
e7:80:11:58:fe:09:02:2b:90:50:ac:df:48:6c:35:
e7:95:71:03:68:f2:e8:f7:12:87:94:e4:26:eb:5c:
11:24:1d:6b:dd:5e:28:65:92:39:1f:33:d6:fb:4b:
d7:7a:1d:39:5f:38:60:07:cb:84:47:04:4e:0f:72:
5b:22:4e:4f:c4:da:c4:97:c2:1d:70:65:34:76:c5:
a5:62:9b:8e:b5:10:34:a8:a7:c6:f0:57:3e:f2:97:
ac:76:fe:67:e9:5e:2c:81:ef:d2:c8:a7:cf:d0:4e:
bf:8d:ce:63:73:54:c6:3f:83:8a:07:81:3e:ce:d6:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18020
38544
45251
45454
55449
55803
sbgp-ipAddrBlock: critical
IPv4:
49.156.24.0/21
101.0.64.0/18
103.14.64.0/22
103.18.196.0/22
103.208.216.0/22
103.237.108.0/22
103.250.20.0/22
110.173.128.0/19
111.67.0.0/19
111.118.160.0/20
116.90.0.0/18
125.214.64.0/20
137.59.248.0/22
150.129.12.0/22
163.53.248.0/22
175.41.40.0/22
182.160.128.0/18
202.4.224.0/20
202.45.150.0/23
202.130.44.0/22
203.16.60.0/23
203.19.59.0/24
203.98.69.0-203.98.71.255
203.98.73.0/24
203.98.75.0/24
203.98.79.0-203.98.80.255
203.98.83.0-203.98.86.255
203.98.88.0/24
203.98.91.0-203.98.93.255
203.98.95.0/24
203.123.59.0/24
223.27.0.0/19
IPv6:
2400:a600::/32
2401:fc00::/32
2401:fe00::/32
2402:9400::/32
2407:7800::/32
Signature Algorithm: sha256WithRSAEncryption
cf:95:a9:a5:c3:ee:f9:6c:43:01:2c:93:ce:ed:ea:bf:42:f5:
b6:97:60:10:f1:b0:00:75:ba:3a:ea:7b:5e:ea:c0:f4:89:c2:
da:6d:cc:70:57:56:03:4f:56:01:d2:33:0c:24:7c:1a:a0:33:
35:90:80:c9:bb:fe:ec:0e:b6:6a:e6:54:98:30:95:57:c8:93:
59:21:1a:a1:63:95:3c:38:f8:90:30:e7:52:5e:33:dd:5b:a3:
dd:49:60:82:c7:45:74:f5:76:e1:cd:d5:94:47:ad:60:1f:5e:
87:1c:54:66:3c:2a:fa:d2:a5:36:41:82:b9:c4:56:9a:39:e7:
cb:6d:07:02:1a:40:eb:74:47:14:97:e3:4e:c8:ba:76:1c:0b:
3f:4c:43:df:c8:44:4a:2b:b3:44:76:29:7f:13:31:9d:dc:a6:
ea:92:9f:96:d8:0e:0c:da:5c:c3:e1:66:39:3b:3d:79:71:6a:
9f:93:f7:ce:80:f1:fb:2e:c2:02:98:ff:68:b2:29:ff:ee:b2:
59:12:c3:e9:7f:fd:fc:ea:1e:13:f9:9d:a5:44:14:25:7a:bb:
59:fa:b9:52:f2:ea:3a:f9:13:38:c2:77:48:c2:dd:e6:a0:8d:
a9:6f:a3:e3:df:74:37:6b:ce:0a:f0:2a:3c:ad:d2:41:5b:3d:
07:23:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:51:27 2026 by rpki-client